I think not, to really remove the timebomb we need to patch the function zwQueryLicenceValue (and NtQueryLicenceValue) into ntdll.dll.
The timebomb was checked during the boot with a call in ntdll to the function zwquerylicencevalue.

All call in a original slc (SlGetWindowsInformationDword, the function to enabled redpill) was redirect into the function NtQueryLicenceValue of ntdll.dll

--------------------

Sorry if my english is not very good, I am french.

Click to expand...

We need the patched or official shsxs.dll to unlock the new start screen.

Just Call me Tricky Ricky

Stop hovering to collapse...Click to collapse...Hover to expand...Click to expand...